--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T17:36:44Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T17:36:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-24T17:36:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-24T17:36:44Z" name: csr-kgwfc resourceVersion: "6349" uid: bacbbeef-89c4-44ea-9dc6-6b9284cd6056 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=fdafe333cb42ac1f43d52652791c545afc09656e7e86f9325817898b8874101d groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-161.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T17:36:44Z" lastUpdateTime: "2026-07-24T17:36:44Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved